Privacy Policy

GigBig is a booking-management tool for performers, operated by DropZone Digital Ltd, a company registered in England and Wales (company number 17335360) with its registered office at 100 North Parade, Grantham NG31 8AU. For UK GDPR purposes we are the data controller for your account data, and we act as a processor for the client information you store in GigBig (more on that below).

Your account details — name, stage name, email, phone, location, photo and bio.

Your business records — gigs, enquiries, clients, venues, contracts, invoices, expenses, mileage and payment statuses that you add or that arrive through your public showcase page.

E-signature records — when a client signs a contract we record the name they typed, the date and time, and technical details of the signing session, so the signature can be evidenced later.

Subscription payment details are collected and processed by Stripe — your card number never touches our servers.

Basic usage data (pages visited, errors) so we can fix problems and improve GigBig.

To run GigBig for you — contracts, reminders, invoices, your showcase page (performance of our contract with you).

To send service emails such as contract requests, payment chasers and receipts on your behalf (performance of contract).

To take subscription payments and keep required financial records (legal obligation).

To understand product usage and keep the service secure (legitimate interests).

We never sell your data, and we never use your clients’ details for our own marketing.

The client names, contact details, event information and signatures you store belong to your business — you are the controller of that information and we process it only on your instructions (storing it, sending the emails you trigger, generating your documents). Only add client information you have a proper basis to hold, and remove it if a client asks you to.

Supabase — database and file storage.

Stripe — subscription billing and payment processing.

Resend — sending the emails you trigger from GigBig.

Anthropic — if you use receipt scanning, the receipt image is processed by Anthropic’s AI service to read the amounts; it is not used to train their models.

Google — push notifications (Firebase) and embedded YouTube videos on showcase pages, which are subject to Google’s own privacy policy when played.

Each provider only receives what it needs to do its job, under a data-processing agreement.

Stored securely with our database provider, Supabase.

Encrypted in transit and at rest, with access controls so only your account can read your records.

Your records are held by our database provider, Supabase, in a data-centre region within the UK or European Union. Some of our sub-processors (Stripe, Resend, Anthropic and Google) may process limited data outside the UK/EU; where they do, the transfer is protected by that provider’s data-processing agreement and UK/EU standard contractual clauses.

Your data stays for as long as you have an account. If you delete your account, your records are removed from the live service straight away and from backups within 30 days. Invoicing records we must keep for tax law are retained for 6 years even after deletion.

See your data — it’s all visible in your account, and you can export your financial records from Money at any time.

Correct it — edit anything from the app.

Delete it — remove individual records any time, or delete your whole account from Settings.

You can also ask us for a copy of your data, object to processing, or ask us to restrict it.

If you’re unhappy with how we handle your data you can complain to the UK Information Commissioner’s Office (ico.org.uk).

Anything about your data: privacy@gigbig.app.